Recruiter screen → Hiring manager interview → Technical round 1 (60 min live coding): if you know OOP, it'll be mildly challenging, but you'll be fine—no FAANG-like Leetcode BS needed (but definitely helps to have firm grasp of DSA) → Technical round 2 (60 min grilling over vuln research methodology/offsec/exploitation/computing internals): this is hard, and intentionally so. They go deep. A mix of extremely specific questions with only one right answer and broadly open-ended questions. → Decision